In 2025, nation-state activity accounted for 67% of threat activity in APAC.

Shadow AI accounted for 20% of AI-related breaches affecting financial institutions.

17% of UK IT decision makers say governance for agentic AI is basic or minimal.

Across the surveyed countries, 64% of organisations report having some or strong governance in place for agentic AI.

Overall visibility over where data is stored, processed and potentially accessible is 97% in Germany and 90% in both the Netherlands and Italy.

39% of organizations say their unstructured data is somewhat or fully prepared for AI use.

48% of organizations cite data security and privacy issues as a top data challenge.

46% of organizations cite insufficient data management and governance as a top data challenge.

39% of organizations actively using, piloting, or exploring AI say most AI-enabled workflows still rely on separate, standalone tools.

57% of healthcare and manufacturing security leaders rank microsegmentation as their top initiative to stop lateral movement.

Only 26% of state CISOs are extremely or very confident that their state's information assets are protected from cyber threats, down from 48% in 2022.

In the last six months, use of reverse proxies to steal Microsoft 365 credentials surged by 139%.

In the last six months, Microsoft Teams attacks escalated by 41%.

91% of enterprises experience workflow bottlenecks despite deploying AI and automation.

Only 9% of enterprises report no significant workflow delays.

44% of enterprises identify decision-making and approvals as a top bottleneck in workflows.

35% of organizations have fully implemented an identity-based Attack Path Management (APM) solution, up from 21% in 2025.

54% of organizations are actively developing plans to strengthen their security posture and risk mitigation strategies for quantum computing.

In Q4 2025, 70% of consumers said they were at least somewhat comfortable with AI agents making purchases on their behalf

Only 31% of IT leaders feel confident in their ability to manage cybersecurity risks linked to AI.